CVE-2022-2113

Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2...

CVE-2022-2113

InvenTree (open source inventory system) has a stored XSS vulnerability in versions prior to 0.7.2, arising from insufficient filtering/escaping of parameter data. The issue affects the part/description data stored and can lead to execution of malicious JavaScript on the client side when rendered...

CVE-2022-2112

CVE-2022-2112 corresponds to a CSV injection in Inventree (inventree/inventree) prior to 0.7.2, caused by improper neutralization of formula elements in CSV data (CSV escape filtering). Affected component: CSV export generation in Inventree before version 0.7.2. Impact: potential for formula inje...

Default credentials

Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...

CVE-2022-2098 Weak Password Requirements in kromitgmbh/titra

Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...

CVE-2022-2098 Weak Password Requirements in kromitgmbh/titra

Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...

Cross-site Scripting in NocoDB

Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.9...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+...

CVE-2022-2079

CVE-2022-2079 corresponds to a stored cross-site scripting vulnerability in NocoDB (nocodb/nocodb) prior to version 0.91.7+. The issue arises from lack of proper data validation/filtering of user-supplied data and its output in the comments feature. Multiple sources (NVD/NVDR, CNVD, Red Hat, OSV,...

GHSA-FP76-F299-V3HJ Cross-site Scripting in FacturaScripts

Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...

CVE-2022-2066

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...

CVE-2022-2067

SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...

CVE-2022-2067 SQL Injection in francoisjacquet/rosariosis

SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0...

CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...

CVE-2022-2061

Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...

CVE-2022-2064

Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+...

CVE-2022-2063

Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+...

Heap overflow

Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...